Route Origin Authorization

$ rpki-client -vvf r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134322e302f32342d3234203d3e203631333137.roa
File:                     3136392e34302e3134322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          P8w3VJ5sXsHvo99OtAqbp97YBbQgJsSN4W2okY86Uaw=
Subject key identifier:   FF:EC:CA:E6:EB:52:EA:6C:C6:AE:E8:2A:63:49:D5:9D:FA:1D:19:BE
Certificate issuer:       /CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
Certificate serial:       172A32ACE18FC52D409DEBA66D353F3DDB120434
Authority key identifier: AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
Subject info access:      rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134322e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 12 Feb 2026 01:05:06 +0000
ROA not before:           Thu 12 Feb 2026 01:00:06 +0000
ROA not after:            Thu 11 Feb 2027 01:05:06 +0000
asID:                     61317
IP address blocks:        169.40.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl
                          rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AB2DCC169C95F2B14DF31DD24A1F67034EA7779C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qy3MFpyV8rFN8x3SSh9nA06nd5w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 23 Feb 2026 04:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:2a:32:ac:e1:8f:c5:2d:40:9d:eb:a6:6d:35:3f:3d:db:12:04:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEF766F103B2EF99DF8C71978A7FE519D730B155
        Validity
            Not Before: Feb 12 01:00:06 2026 GMT
            Not After : Feb 11 01:05:06 2027 GMT
        Subject: CN=FFECCAE6EB52EA6CC6AEE82A6349D59DFA1D19BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:45:ef:8f:b9:ef:b6:08:c6:28:de:02:5c:
                    44:b8:7c:74:51:93:cb:22:28:ad:16:8f:cd:5a:b0:
                    0d:2e:ac:68:c6:d8:38:c8:01:7a:91:64:c3:95:a9:
                    9b:a0:aa:98:94:b5:17:8b:4a:54:2e:1c:55:c1:61:
                    04:f5:30:c7:3b:8b:7b:cd:b1:e6:e5:fb:e9:72:ae:
                    1d:27:10:76:bd:7e:e4:21:68:1e:78:8b:2d:0e:1d:
                    f7:59:f5:db:53:2b:68:9d:ed:eb:4b:9e:90:99:3b:
                    ab:6b:74:1d:20:87:fa:9a:0b:44:d2:66:df:14:f9:
                    24:b8:82:36:7c:4a:33:ec:e9:c6:76:94:8b:52:98:
                    0e:5c:0c:e4:35:fa:90:d3:f9:7c:c1:88:74:71:77:
                    f2:41:71:01:14:b7:51:08:9d:4f:d7:30:ba:19:b9:
                    5b:90:25:9f:f5:db:0d:82:a1:52:49:ff:ce:be:81:
                    13:71:80:27:44:f2:ab:d2:79:40:5f:8b:b1:1f:dd:
                    0c:a9:14:c6:30:36:bf:4d:e6:37:c5:07:1d:a3:a8:
                    32:c5:9c:9a:5a:99:7b:54:92:2c:30:30:ae:3f:66:
                    79:14:0c:38:3a:95:f3:8a:ff:65:2d:e7:1d:9a:a1:
                    65:d7:a1:4d:f2:fc:fc:e7:d3:8f:32:0c:7c:a6:5d:
                    9e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EC:CA:E6:EB:52:EA:6C:C6:AE:E8:2A:63:49:D5:9D:FA:1D:19:BE
            X509v3 Authority Key Identifier:
                keyid:AE:F7:66:F1:03:B2:EF:99:DF:8C:71:97:8A:7F:E5:19:D7:30:B1:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/AEF766F103B2EF99DF8C71978A7FE519D730B155.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/4/AEF766F103B2EF99DF8C71978A7FE519D730B155.cer

            Subject Information Access:
                Signed Object - URI:rsync://r.magellan.ipxo.com/repo/30327b9e-227a-4ebd-825b-3b98095dc927-0/0/3136392e34302e3134322e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.40.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:9e:01:e4:1a:5c:e0:43:1b:21:0b:36:32:63:bb:3b:0a:05:
         78:c1:ac:81:5c:f6:62:77:6e:9c:73:d3:83:8e:93:66:29:8b:
         35:df:94:60:fa:dc:b1:bc:66:d3:fe:94:52:8f:3e:13:77:aa:
         41:14:bb:0b:8c:58:78:f2:03:b7:82:6f:f2:75:dd:2e:fd:0b:
         fa:86:9b:af:ca:12:a9:e5:72:e1:2f:41:38:bf:f8:63:5d:04:
         25:e0:34:63:a1:08:f3:20:8d:2b:46:66:16:d0:2a:df:83:a1:
         1b:41:91:88:68:6c:dd:3a:9c:fb:29:38:02:27:11:6a:18:4e:
         bb:ea:a2:84:09:86:79:95:93:46:e6:ef:8e:d2:ac:4d:3c:db:
         8c:0c:f7:78:95:a2:3d:66:ba:8b:9b:aa:1e:1f:6e:35:38:df:
         3f:25:fd:ab:9a:8f:53:0d:e0:0a:75:41:11:07:59:47:81:68:
         86:be:e3:b9:20:7b:37:fc:39:28:a5:03:8a:d8:45:a4:9b:ff:
         d2:4d:cb:38:df:cb:c3:ae:74:0d:49:7c:4f:0c:4a:d2:c4:ff:
         f7:b7:30:5f:28:f8:10:0a:9f:74:47:2a:b7:24:73:50:bd:34:
         ce:36:7a:56:b2:8f:80:8a:36:93:75:08:e8:db:f8:c2:48:15:
         cd:3a:d6:75
-----BEGIN CERTIFICATE-----
MIIFWDCCBECgAwIBAgIUFyoyrOGPxS1AneumbTU/PdsSBDQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVGNzY2RjEwM0IyRUY5OURGOEM3MTk3OEE3RkU1MTlE
NzMwQjE1NTAeFw0yNjAyMTIwMTAwMDZaFw0yNzAyMTEwMTA1MDZaMDMxMTAvBgNV
BAMTKEZGRUNDQUU2RUI1MkVBNkNDNkFFRTgyQTYzNDlENTlERkExRDE5QkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+m0Xvj7nvtgjGKN4CXES4fHRR
k8siKK0Wj81asA0urGjG2DjIAXqRZMOVqZugqpiUtReLSlQuHFXBYQT1MMc7i3vN
sebl++lyrh0nEHa9fuQhaB54iy0OHfdZ9dtTK2id7etLnpCZO6trdB0gh/qaC0TS
Zt8U+SS4gjZ8SjPs6cZ2lItSmA5cDOQ1+pDT+XzBiHRxd/JBcQEUt1EInU/XMLoZ
uVuQJZ/12w2CoVJJ/86+gRNxgCdE8qvSeUBfi7Ef3QypFMYwNr9N5jfFBx2jqDLF
nJpamXtUkiwwMK4/ZnkUDDg6lfOK/2Ut5x2aoWXXoU3y/Pzn048yDHymXZ7pAgMB
AAGjggJiMIICXjAdBgNVHQ4EFgQU/+zK5utS6mzGrugqY0nVnfodGb4wHwYDVR0j
BBgwFoAUrvdm8QOy75nfjHGXin/lGdcwsVUwDgYDVR0PAQH/BAQDAgeAMIGIBgNV
HR8EgYAwfjB8oHqgeIZ2cnN5bmM6Ly9yLm1hZ2VsbGFuLmlweG8uY29tL3JlcG8v
MzAzMjdiOWUtMjI3YS00ZWJkLTgyNWItM2I5ODA5NWRjOTI3LTAvMC9BRUY3NjZG
MTAzQjJFRjk5REY4QzcxOTc4QTdGRTUxOUQ3MzBCMTU1LmNybDCBngYIKwYBBQUH
AQEEgZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5y
aXBlLm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1
OTBiOTlhZi80L0FFRjc2NkYxMDNCMkVGOTlERjhDNzE5NzhBN0ZFNTE5RDczMEIx
NTUuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzov
L3IubWFnZWxsYW4uaXB4by5jb20vcmVwby8zMDMyN2I5ZS0yMjdhLTRlYmQtODI1
Yi0zYjk4MDk1ZGM5MjctMC8wLzMxMzYzOTJlMzQzMDJlMzEzNDMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKkojjANBgkqhkiG
9w0BAQsFAAOCAQEAkJ4B5Bpc4EMbIQs2MmO7OwoFeMGsgVz2YndunHPTg46TZimL
Nd+UYPrcsbxm0/6UUo8+E3eqQRS7C4xYePIDt4Jv8nXdLv0L+oabr8oSqeVy4S9B
OL/4Y10EJeA0Y6EI8yCNK0ZmFtAq34OhG0GRiGhs3Tqc+yk4AicRahhOu+qihAmG
eZWTRubvjtKsTTzbjAz3eJWiPWa6i5uqHh9uNTjfPyX9q5qPUw3gCnVBEQdZR4Fo
hr7juSB7N/w5KKUDithFpJv/0k3LON/Lw650DUl8TwxK0sT/97cwXyj4EAqfdEcq
tyRzUL00zjZ6VrKPgIo2k3UI6Nv4wkgVzTrWdQ==
-----END CERTIFICATE-----
Generated at Sun Feb 22 21:32:35 2026 by rpki-client